GRC Assurance Manager

Wayve; London (KY); On-site; USD 122,000 - 163,000; Full time

Job summary

Wayve is seeking a Security Assurance Manager to establish and scale our security assurance capability, aligning assurance with our security programme and customer commitments.

You will design processes, methodologies, and relationships, progressing from periodic testing to continuous, data-driven validation across a fast-moving engineering organisation. Collaboration with engineering teams and external assessments will be key.

Qualifications

• Experience building or operating security assurance in modern tech stacks.
• Strong understanding of control design and operating effectiveness.
• Experience with cloud-native, SaaS environments and engineering collaboration.
• Ability to communicate assurance outcomes to technical and non-technical stakeholders.
• Proactive, collaborative mindset to improve security posture.

Responsibilities

• Build and scale Wayve’s security assurance capability.
• Define testing approaches, assurance plans, and reporting.
• Validate design and operating effectiveness of controls.
• Automate evidence collection with Security Analytics Engineer.
• Support external assessments and certifications.

Skills

Security assurance design

Control testing

Cloud-native security

Stakeholder communication

Independent critique

Job description

About the role

As Wayve grows, so do the expectations of our customers and stakeholders. We need a scalable approach to validating our controls and providing confidence that our security programme is operating as intended.

As our Security Assurance Manager, you’ll join the Security team to establish Wayve’s security assurance capability. You’ll design and operate the processes, methodologies, and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments, and strengthening trust across the organisation.

This is an opportunity to build a security assurance capability from the ground up. As a fast-growing engineering organisation, you’ll shape how assurance evolves as we scale. You’ll work closely with teams across Wayve to evolve assurance from periodic, manual testing towards continuous, data-driven validation.

We’d love to hear from you if you’re motivated by helping engineering teams build stronger security through objective evidence, collaboration, and continuous improvement.

Key responsibilities

Build our security assurance capability

• Design, implement, and continuously improve Wayve’s security assurance capability.

• Develop pragmatic, risk-based assurance methodologies that provide confidence our security controls are operating effectively.

• Define testing approaches, assurance plans, and reporting that support our security programme as it continues to mature.

• Build trusted relationships across Wayve to embed assurance into the way we operate.

• Help establish a culture where assurance is recognised not as a burden, but as a source of insight that helps us improve our security posture.

Validate control effectiveness

• Perform ongoing assurance activities to validate the design and operating effectiveness of security controls across the organisation.

• Produce objective, evidence-based assessments of control effectiveness and clearly communicate findings to stakeholders.

• Independently assess controls while working collaboratively with teams to strengthen security outcomes and improve control maturity.

• Track assurance findings through remediation, validating that issues have been effectively addressed.

• Support external assessments, certifications, and customer assurance activities by providing trusted assurance evidence.

Drive continuous assurance

• Partner with the Security Analytics Engineer to automate evidence collection and evolve assurance from periodic assessments to continuous validation.

• Identify opportunities to replace manual assurance activities with scalable, data-driven approaches.

• Develop repeatable testing methodologies that increase consistency, quality, and coverage as the programme matures.

• Contribute to the ongoing evolution of Wayve’s security control framework by identifying opportunities to improve control design, measurability, and assurance.

About you

Essential

• Experience designing, building, or operating security assurance or controls assurance within organisations with modern tech stacks.

• Strong understanding of security controls and how to evaluate both design and operating effectiveness.

• Experience working in cloud-native, SaaS-heavy environments and collaborating closely with engineering teams.

• Experience developing assurance methodologies, performing control testing, and communicating assurance outcomes to technical and non-technical stakeholders.

• Ability to independently challenge control effectiveness while building collaborative relationships that help teams improve.

• Strong communication skills, with the ability to influence stakeholders across our business.

• A pragmatic mindset, balancing strong governance with the realities of a fast-moving engineering-led organisation.

Desirable

• Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar.

• Experience helping organisations evolve from periodic assurance towards continuous assurance.

• Familiarity with assurance techniques in cloud-native and software engineering environments.

• Professional certifications such as CISA, ISO 27001 Lead Auditor, or similar.

What success looks like

During your first year you will:

• Establish Wayve’s security assurance capability and embed it into the Security programme.

• Implement an ongoing assurance process that provides confidence key security controls are operating effectively.

• Build strong partnerships across internal teams that enable assurance to become a collaborative activity rather than a point-in-time exercise.

• Deliver independent, evidence-based assurance over controls supporting TISAX, ISO 21434, and customer security commitments.

• Introduce automation into selected assurance activities through partnership with the Security Analytics Engineer.

• Help establish a culture where assurance is recognised as a source of insight that enables Security to continuously improve.